# The editor's answers of 26 October: six rows decided, three tasks opened, the release words settled

> In one message the editor answered every request that was waiting: the conductor keeps its hats, no comms vault, process.env clean by default, Dependabot's pull requests are the developer's to merge, main becomes a deployment branch and the words are major on main and minor on dev. R15 and R21 stay with the editor; R18 waits; R17's cards were reviewed, not yet given the go. The article on the release scheme went live as v0.6.25.

*Source: <https://sharness.ai/admin/updates/2026-10-26T1608Z/index.html> · generated by tools/gen_admin.py from content/admin/, so the page and this file cannot drift. Every page on this site has a .md twin.*

---

flash update · 26 Oct 2026, 16:08 UTC · covers 2026-10-26T11:28Z to 2026-10-26T16:08Z · by conductor

- **Decided.** [R13](../../board/index.md#r13): the conductor's role and its three extra hats stand. [R12](../../board/index.md#r12): no comms vault; the repository is the channel, and the Sherpa's vault is the telemetry lane, not an inbox. [R16](../../board/index.md#r16): a confined child's environment is clean by default and explicit always; `"inherit"` must be written. [R19](../../board/index.md#r19): Dependabot's pull requests are cli@'s to merge once CI passes, as a standing rule. [R22](../../board/index.md#r22): `main` becomes a deployment branch (the setting is the editor's), and the words are settled: a push to `main` is the major release and bumps the middle number; a push to `dev` is the minor and bumps the last.
- **Opened.** [T27](../../board/index.md#t27) (security@, with pbp@ and cli@): the `process.env` row. [T28](../../board/index.md#t28) (cli@): merge #1, #2 and #3 on the CLI and every Dependabot pull request after them. [T29](../../board/index.md#t29) (website@, cli@): the release words in the workflows' comments, `release.py`, the releases page and `AGENTS.md`.
- **Still the editor's.** [R15](../../board/index.md#r15) (rulesets, 2FA, push protection, the PyPI publisher's environment) and [R21](../../board/index.md#r21) (the three language repositories), confirmed today. [R18](../../board/index.md#r18) (the CLI repository's description, topics and Discussions) waits for later. [R17](../../board/index.md#r17): the editor asked to see the cards' table; no go yet, so no scheduled task exists for any member and the conductor's one-off check-ins have stopped.
- **Published.** [CI owns the version](../../../articles/ci-owns-the-version.html), the article on the release scheme, its three-year history and the three days it took this site to adopt it, with a portable job for the next project; site v0.6.25.
